Following are the limitations of the features:
Supervisor Role:
-
Department membership is authoritative only when agents are placed in
/Departments/<name>groups. -
Agent usernames in Keycloak must match the recording
agentIdvalues used by VRS (same identifier convention as today). -
Service account requires
view-users; if revoked, supervisor resolution fails safe to empty allowed list (no elevated access). -
Admin and agent workflows are intentionally unchanged for backward compatibility with existing VRS clients.
Session Timeout:
-
If the user has multiple VRS tabs open, an expiry in one tab eventually triggers a logout/refresh in the others.